<div dir="ltr">So I tried this, but it seems to still be using aes128-gcm:<div><br></div><div><div style="line-height:18px"><div style="color:rgb(0,0,0);font-family:"Roboto Mono",Menlo,Monaco,"Courier New",monospace,Menlo,Monaco,"Courier New",monospace;font-size:12px;white-space:pre"><span style="color:rgb(128,0,0)"> <MetadataProvider</span></div><div style="color:rgb(0,0,0);font-family:"Roboto Mono",Menlo,Monaco,"Courier New",monospace,Menlo,Monaco,"Courier New",monospace;font-size:12px;white-space:pre"> <span style="color:rgb(229,0,0)">id</span>=<span style="color:rgb(0,0,255)">"HTTPMetadatalawlibOverdrive"</span></div><div style="color:rgb(0,0,0);font-family:"Roboto Mono",Menlo,Monaco,"Courier New",monospace,Menlo,Monaco,"Courier New",monospace;font-size:12px;white-space:pre"> <span style="color:rgb(229,0,0)">xsi:type</span>=<span style="color:rgb(0,0,255)">"FilesystemMetadataProvider"</span></div><div style="color:rgb(0,0,0);font-family:"Roboto Mono",Menlo,Monaco,"Courier New",monospace,Menlo,Monaco,"Courier New",monospace;font-size:12px;white-space:pre"> <span style="color:rgb(229,0,0)">metadataFile</span>=<span style="color:rgb(0,0,255)">"%{idp.home}/metadata/lawOverdrive.xml"</span><span style="color:rgb(128,0,0)">></span></div><div style="color:rgb(0,0,0);font-family:"Roboto Mono",Menlo,Monaco,"Courier New",monospace,Menlo,Monaco,"Courier New",monospace;font-size:12px;white-space:pre"> <span style="color:rgb(128,0,0)"><MetadataFilter</span> <span style="color:rgb(229,0,0)">xsi:type</span>=<span style="color:rgb(0,0,255)">"Algorithm"</span><span style="color:rgb(128,0,0)">></span></div><div style="color:rgb(0,0,0);font-family:"Roboto Mono",Menlo,Monaco,"Courier New",monospace,Menlo,Monaco,"Courier New",monospace;font-size:12px;white-space:pre"> <span style="color:rgb(128,0,0)"><md:EncryptionMethod</span> <span style="color:rgb(229,0,0)">Algorithm</span>=<span style="color:rgb(0,0,255)">"<a href="http://www.w3.org/2001/04/xmlenc#aes128-cbc">http://www.w3.org/2001/04/xmlenc#aes128-cbc</a>"</span> <span style="color:rgb(128,0,0)">/></span></div><div style="color:rgb(0,0,0);font-family:"Roboto Mono",Menlo,Monaco,"Courier New",monospace,Menlo,Monaco,"Courier New",monospace;font-size:12px;white-space:pre"> <span style="color:rgb(128,0,0)"></MetadataFilter></span></div><div style="color:rgb(0,0,0);font-family:"Roboto Mono",Menlo,Monaco,"Courier New",monospace,Menlo,Monaco,"Courier New",monospace;font-size:12px;white-space:pre"> <span style="color:rgb(128,0,0)"></MetadataProvider></span></div><div style="color:rgb(0,0,0);font-family:"Roboto Mono",Menlo,Monaco,"Courier New",monospace,Menlo,Monaco,"Courier New",monospace;font-size:12px;white-space:pre"><span style="color:rgb(128,0,0)"><br></span></div><div style="color:rgb(0,0,0);font-family:"Roboto Mono",Menlo,Monaco,"Courier New",monospace,Menlo,Monaco,"Courier New",monospace;font-size:12px;white-space:pre"><span style="color:rgb(128,0,0)"><br></span></div>What am I doing wrong?</div></div></div><br><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">On Tue, Jan 14, 2025 at 8:51 PM Mohamed Lrhazi <<a href="mailto:lrhazi@cua.edu">lrhazi@cua.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"> metadata filters looks simple enough! Thank you!</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Jan 14, 2025 at 7:33 PM Cantor, Scott via users <<a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">>Is this possible?<br>
<br>
Yes, with lots of very ugly XML [1], but there's no reason to and it's ill-advised, it should be done with metadata or metadata filters.<br>
<br>
-- Scott<br>
<br>
[1] <a href="https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199508797/SecurityConfiguration" rel="noreferrer" target="_blank">https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199508797/SecurityConfiguration</a><br>
<br>
-- <br>
For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw" rel="noreferrer" target="_blank">https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div>
</blockquote></div>